|
|
|
|
|
|
|
|
|
Domain keys identified mail (dkim)
| Глоссарий терминов по социальной инженерии и информационной безопасности |
A system which allows receiving mail servers to check whether an email came from the domain that it purports to and was not modified during transport. this is done largely to prevent mail spoofing and tampering.
|
|
|
Domain spoofing, английский
The creation of a website domain that is made to look like a bona fide website. the victim logs into the spoofed website domain with their real credentials, which are then used by the attacker. for example, the attacker might claim there is an urgent document to be reviewed on droppbox.com instead of dropbox.com.
Dns cache poisoning, английский
The attacker “poisons” the dns cache of a dns server with incorrect routing information. this results in dns requests that resolve to the attacker’s proxy server and browser requests being surreptitiously redirected to a malicious domain where the login credentials and other sensitive information may be captured. see also pharming, credential harvesting.
|
|
|
|
|
|
|
